$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a383a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a383a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ZAdGh5hCz/4ZZGOSfnh5NoeMEBG35FN7NYC722zBo88= Subject key identifier: 84:C6:AA:46:41:B8:2F:85:BF:69:41:C1:4B:60:44:BF:71:95:33:4D Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3EF68B36D807D4A2645E56FD0565145D913D70D3 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a383a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:08 +0000 ROA not before: Thu 08 Jun 2023 02:57:08 +0000 ROA not after: Thu 06 Jun 2024 03:02:08 +0000 asID: 55701 IP address blocks: 2405:b900:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f6:8b:36:d8:07:d4:a2:64:5e:56:fd:05:65:14:5d:91:3d:70:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:08 2023 GMT Not After : Jun 6 03:02:08 2024 GMT Subject: CN=84C6AA4641B82F85BF6941C14B6044BF7195334D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:1a:65:74:11:df:d7:51:c7:dc:d4:47:10: 38:3c:ed:50:b1:5a:de:4d:00:d5:a2:ad:c3:10:a4: 43:88:70:c8:fc:a4:ac:d6:a6:28:08:4b:52:01:a1: 1c:dd:39:3e:0b:b9:21:b5:f8:7d:76:34:2b:3c:7b: c4:b5:82:81:f3:dc:85:a8:ea:0a:ed:aa:84:64:a8: 3c:fa:c9:41:e5:b4:67:fa:57:c8:dd:f6:fe:eb:14: e8:e3:b7:38:1d:11:87:20:96:7d:45:ed:d0:b8:fa: 4d:6f:09:61:d1:c0:41:59:e8:42:4c:4e:97:bc:43: 9e:50:42:84:dc:d3:9a:db:bb:b2:68:b4:1d:5a:34: 21:d6:01:64:11:93:0c:98:eb:4c:16:0b:f1:ad:2c: 5e:b1:8c:89:c9:55:0b:f0:57:8e:82:2b:a0:d8:f6: f0:12:65:d7:5c:4e:6f:1f:42:97:e2:c7:0d:28:78: 09:5d:ba:8a:27:71:64:d9:0b:ee:8e:e1:aa:ac:8d: 09:89:0f:71:ca:a1:30:52:02:7e:65:b5:74:ac:eb: e8:cd:19:1e:73:96:33:6b:da:0e:89:f8:e3:5f:40: 7d:04:c3:e3:cc:c1:ff:5a:ed:7c:52:24:5b:bc:7f: 5f:da:82:c5:b0:12:4b:38:23:b8:db:1e:8d:c9:a4: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:AA:46:41:B8:2F:85:BF:69:41:C1:4B:60:44:BF:71:95:33:4D X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a383a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:8::/48 Signature Algorithm: sha256WithRSAEncryption 50:02:19:da:95:68:23:3c:96:d9:79:b6:c5:1b:cb:9e:9e:c8: 87:b7:ef:87:e5:0d:e2:b4:73:3c:5c:13:41:1e:04:a7:32:f8: 91:8b:5e:ff:4b:8d:18:3e:e6:86:a0:a5:0b:29:d2:2e:38:62: 17:b3:96:3f:21:7f:95:4f:02:e6:48:78:1d:7e:0b:39:f0:7d: 2a:34:d8:67:eb:35:23:c5:5a:a2:3a:7b:ef:6f:14:9c:78:30: 3d:d9:a3:a4:75:f2:54:33:91:18:42:a9:98:25:7b:3b:b9:8c: 02:75:ea:53:e9:b1:4a:a3:bd:3c:dc:da:13:b2:bb:7d:81:4c: ab:ec:fc:18:3c:84:85:c7:c2:f2:45:43:78:68:41:5d:36:c9: c7:e6:c3:1c:d7:00:b7:b2:42:58:63:ad:56:ce:11:e2:bb:5c: 2a:9d:f9:9f:27:9e:3f:5b:fc:d1:57:f9:34:76:59:11:82:38: a2:51:47:84:6d:b8:2f:9d:26:b8:c6:d1:bd:d2:bb:a4:bf:e4: 1a:5a:9c:6f:08:5b:94:96:4b:e2:73:ba:10:8a:54:55:3e:06: ff:47:1a:40:50:8a:23:82:f4:9b:d9:ed:8c:e6:27:22:42:8a: f4:96:d0:72:4e:ca:0b:e1:1b:6d:be:33:77:02:73:6f:52:05: 2e:0c:82:af -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUPvaLNtgH1KJkXlb9BWUUXZE9cNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDhaFw0yNDA2MDYwMzAyMDhaMDMxMTAvBgNV BAMTKDg0QzZBQTQ2NDFCODJGODVCRjY5NDFDMTRCNjA0NEJGNzE5NTMzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDluRpldBHf11HH3NRHEDg87VCx Wt5NANWircMQpEOIcMj8pKzWpigIS1IBoRzdOT4LuSG1+H12NCs8e8S1goHz3IWo 6grtqoRkqDz6yUHltGf6V8jd9v7rFOjjtzgdEYcgln1F7dC4+k1vCWHRwEFZ6EJM Tpe8Q55QQoTc05rbu7JotB1aNCHWAWQRkwyY60wWC/GtLF6xjInJVQvwV46CK6DY 9vASZddcTm8fQpfixw0oeAlduooncWTZC+6O4aqsjQmJD3HKoTBSAn5ltXSs6+jN GR5zljNr2g6J+ONfQH0Ew+PMwf9a7XxSJFu8f1/agsWwEks4I7jbHo3JpCY/AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUhMaqRkG4L4W/aUHBS2BEv3GVM00wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAIMA0G CSqGSIb3DQEBCwUAA4IBAQBQAhnalWgjPJbZebbFG8uensiHt++H5Q3itHM8XBNB HgSnMviRi17/S40YPuaGoKULKdIuOGIXs5Y/IX+VTwLmSHgdfgs58H0qNNhn6zUj xVqiOnvvbxSceDA92aOkdfJUM5EYQqmYJXs7uYwCdepT6bFKo7083NoTsrt9gUyr 7PwYPISFx8LyRUN4aEFdNsnH5sMc1wC3skJYY61WzhHiu1wqnfmfJ54/W/zRV/k0 dlkRgjiiUUeEbbgvnSa4xtG90rukv+QaWpxvCFuUlkvic7oQilRVPgb/RxpAUIoj gvSb2e2M5iciQor0ltByTsoL4RttvjN3AnNvUgUuDIKv -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org